Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f757360d-8c7d-450e-a2e2-6f1eb9c0d6d8.roa
File:                     f757360d-8c7d-450e-a2e2-6f1eb9c0d6d8.roa (raw, json)
Hash identifier:          k0rp8f3xjmjFxMH8k3gBcjkuzetaaqVY9WX/YjB1Le4=
Subject key identifier:   97:3C:88:E3:C6:10:02:DC:2A:04:14:71:B7:28:0F:7F:7D:1C:97:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       449BD37F5D300969EC5394645DA022D090A01EBA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f757360d-8c7d-450e-a2e2-6f1eb9c0d6d8.roa
Signing time:             Tue 13 Oct 2026 00:41:15 +0000
ROA not before:           Tue 13 Oct 2026 00:41:15 +0000
ROA not after:            Mon 11 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f60:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9b:d3:7f:5d:30:09:69:ec:53:94:64:5d:a0:22:d0:90:a0:1e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 13 00:41:15 2026 GMT
            Not After : Jan 11 23:59:59 2027 GMT
        Subject: serialNumber=99d22e3cc5b4abd7f468c4aa5a2f44a93edca7bff475b83d8eaa1c1d72eff028, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a6:69:b6:b9:fb:d7:64:b8:e7:52:ed:6c:24:
                    00:c3:eb:cb:cc:d1:64:bb:a3:47:a9:fa:87:66:78:
                    6d:9b:1c:28:53:08:7c:2c:38:15:2e:4a:57:bf:7f:
                    43:5a:ce:4a:4f:13:d5:27:9b:3d:18:c7:39:db:ac:
                    40:3c:43:e0:3c:a6:ca:c5:55:03:37:8e:29:08:5c:
                    bd:6d:a4:3c:50:5f:95:49:f3:f0:72:b9:64:b0:f5:
                    be:be:87:b5:71:14:07:43:ba:53:55:8f:a7:f3:15:
                    e1:7a:81:61:cf:62:54:29:5c:dc:8f:06:d8:36:3e:
                    cc:d2:63:a2:f7:1a:b1:b6:f7:9e:19:09:21:cc:b3:
                    16:64:cc:10:41:90:cf:1a:e0:dd:51:5c:22:2c:2a:
                    90:fa:61:cd:55:ef:a5:8b:be:9e:3f:96:03:f3:0e:
                    a8:43:a5:07:7b:94:2b:68:d5:aa:59:a5:6b:24:a1:
                    06:f9:1f:55:61:83:ad:61:7e:a9:16:83:45:3b:f0:
                    da:d2:2c:fc:81:c5:88:fc:44:2c:47:13:c3:91:0d:
                    cb:48:e1:50:f9:f0:49:ed:57:10:2f:55:d7:53:eb:
                    37:74:0b:f3:d6:04:94:65:a2:ce:81:e8:1c:d5:e0:
                    9f:dc:0d:23:2a:61:9f:db:26:32:a6:69:7c:b7:6f:
                    08:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3C:88:E3:C6:10:02:DC:2A:04:14:71:B7:28:0F:7F:7D:1C:97:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f757360d-8c7d-450e-a2e2-6f1eb9c0d6d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:ff:ef:fe:32:8e:9b:9a:a2:67:90:57:f3:4a:fa:f6:d5:e1:
         07:2d:97:52:1f:98:62:da:10:8e:b5:8b:a5:c5:29:b4:09:22:
         e5:72:fc:9f:1f:cb:4a:d6:af:41:60:c1:72:4d:7d:7a:c6:df:
         ec:b0:2a:d4:32:a0:84:eb:3d:c6:68:0f:83:0a:cf:f7:b9:1a:
         64:98:d7:28:c0:cc:a5:1e:55:6d:4d:e8:b1:12:33:b1:6f:88:
         3f:0e:32:91:00:19:5d:d1:e0:f8:56:b7:ab:f3:d2:cf:87:3e:
         4e:c7:cc:6c:fd:50:40:03:b6:31:25:cd:c2:61:06:26:44:28:
         de:5b:7b:33:43:54:89:84:1b:4e:a1:39:44:e1:20:26:11:5d:
         d9:15:f2:57:8c:e7:39:52:7b:22:32:48:74:80:a2:fc:74:e2:
         d6:b5:4b:f3:a6:08:b8:97:7c:9a:81:54:64:ba:5d:17:64:f6:
         9b:ad:c6:e4:80:59:45:4d:29:11:a2:88:bb:30:ca:b7:45:f0:
         dd:b4:24:0f:df:fc:be:cf:07:17:96:a1:28:28:16:7a:10:61:
         bd:c9:25:d4:e5:49:4d:c9:85:47:61:25:b0:11:69:56:74:3c:
         77:52:60:88:97:85:d0:05:95:5c:a4:7f:39:0c:c9:7f:9e:22:
         b2:70:7f:e3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:28:28 2026 by rpki-client